Key Responsibilities:
Deploy and maintain the SAP SPM network infrastructure to include routers, switches, firewalls and other network devices.
- Review existing processes and recommend changes or institute new processes as necessary, including the areas of monitoring, upgrades, and tuning.
- Participate in application customization discussions and technical implementations as it pertains to network engineering.
- Management of both remote-access and site-to-site VPN tunnels in a Palo Alto / Cisco environment.
- Debugging and troubleshooting of any IPsec/network related issues VPN access.
- Working directly with customers to assist their network teams in establishing connectivity.
- Monitoring and management of Palo Alto Networks IPS devices.
- Generate high-quality project documentation, such as architecture designs, implementation plans, design documents, test plans, etc.
- Provide documentation, training and technical escalation applicable for day-to-day administration and change requests for network configuration.
- Document maintenance activities, failure analysis results, incident reports, penetration analysis, audit results and activities related to management of small-scale projects.
- Provide technical escalation and be on call during designated periods.
- Work with engineering on release management and testing within a SaaS environment.
- Diagnose, as appropriate, complex systems issues with multiple influencing factors which may require interaction with vendors to resolve problems.
- Ability to work in a highly collaborative team environment as well as being productive and accountable independently.
Qualifications:4+ years experience designing, deploying and maintaining large data center environments.
- Experience in a SaaS production environment.
- Experience with external monitoring tools such as Thousand Eyes or similar.
- Experience with internal monitoring tools such as Solarwinds, Dynatrace, Nagios, etc.
- Good knowledge of LAN/WAN technologies.
- Good knowledge of TCP and UDP protocols.
- Good knowledge of BGP, OSPF and EIGRP.
- Good knowledge of STP.
- Knowledge of network access control on Cisco devices preferred.
- Experience in cable management techniques desired
- Experience supporting wide area networks with emphasis on IPSec, VPN and MPLS transport preferred.
- Experience with Cisco IOS, IOS-XR and NX-OS preferred.
- Familiarity with administration of network services (DNS, NTP, AAA servers, etc) is desirable.
- Experience working in a load balanced environment is desirable.
- Experience with F5 BigIP a plus.
- Experience with automation tools a plus.
Considered a strong “plus” if the candidate is familiar with:ITIL v3
- Infrastructure Monitoring
- IT Security Principles